1. Scope and controller
This policy applies to the SmartPenny Android application (package com.comics.smartpeny) and the SmartPenny services available through this website and API. SmartPenny is operated by Bai Yuan, who is responsible for the processing described here.
SmartPenny helps users record income and expenses, organize budgets and recurring entries, synchronize data across devices, share a family ledger with invited members, import bill information, and send product feedback.
2. Data we handle
Account and authentication data
When you choose Google sign-in, SmartPenny receives a Firebase user identifier, email address, display name, profile image reference, and authentication credentials needed to sign you in. Existing email/password accounts can also sign in through Firebase Authentication. Email/password credentials are sent over HTTPS directly to Firebase; SmartPenny's API receives a Firebase ID token, not your password. SmartPenny issues its own session token for authenticated API requests.
Financial and ledger content you provide
We process ledger dates, categories, amounts, income/expense status, budgets, statistics, recurring rules, family-ledger names, memberships, and invitation records. This data is supplied or created by you and may reveal personal financial activity.
Files, images, and camera access
Text, CSV, and supported spreadsheet files selected for import are parsed on your device. If you explicitly choose AI bill-image recognition, the selected image is encoded and sent over HTTPS to Volcengine Ark/Doubao so that transaction text can be extracted. Do not submit images containing information you do not want processed by this provider.
Camera permission is used for user-initiated QR scanning and supported image workflows. Ordinary QR camera frames are processed on-device and are not stored by SmartPenny.
Feedback and technical data
If you contact us through the feedback feature, we process the feedback text, feedback type, optional contact details and attachments, app version, device brand/model, Android version, status, and support reply. Hosting systems may also generate limited operational logs such as IP address, request time, error details, and security events.
On-device data
SmartPenny stores session information, display preferences, budget settings, recurring-rule caches, and other app state on your device. Android may include eligible app data in device-transfer or backup features controlled by your Google account and operating-system settings.
3. How we use data
- authenticate accounts and maintain secure sessions;
- provide ledger, budget, recurring-entry, family-sharing, import, export, and synchronization features;
- extract transaction text when you request AI image recognition;
- respond to feedback, diagnose failures, prevent abuse, and protect the service;
- maintain service reliability and comply with applicable law; and
- process account-access, privacy, and deletion requests.
SmartPenny does not sell personal data, does not serve advertising, and does not include an advertising or behavioral-analytics SDK.
5. Security
We use encrypted HTTPS transport for public SmartPenny services, access-controlled servers, private database networks, authenticated API requests, restricted production credentials, and operational monitoring. Sensitive production passwords and service credentials are not embedded in this website.
No system is completely secure. Protect your Google account and device, do not share authentication codes or tokens, and contact privacy@apx.gy if you believe your account has been compromised.
6. Retention and deletion
Account and synchronized product data are retained while your SmartPenny account is active or as needed to provide requested features. Feedback is retained while needed to respond, diagnose the reported issue, and maintain an appropriate support history. Operational and security logs are retained only for a limited period appropriate to troubleshooting and abuse prevention.
You may request deletion at any time. After reasonable identity verification, we delete or irreversibly de-identify the account and associated data from active systems within 30 days. We may retain only the minimum information required by law or reasonably needed for fraud prevention, security, dispute resolution, or enforcing legal rights, and delete it when that reason expires.
7. Your choices and rights
You may choose not to create or use a SmartPenny account; authenticated app features will then be unavailable. You can decline camera access, avoid AI image recognition, edit or delete individual ledger entries, leave or delete eligible family books, clear local app data through Android settings, export supported ledger data, or request access, correction, deletion, or information about processing.
Depending on where you live, local law may provide additional rights, including objection, restriction, portability, or complaint to a data-protection authority. Contact us to exercise an applicable right.
8. Children's privacy
SmartPenny is not directed to children under 13 or any higher minimum age required in their country. We do not knowingly collect personal data from a child who cannot lawfully consent. A parent or guardian who believes a child supplied data should contact us for deletion.
9. International processing
SmartPenny and its service providers may process information in countries or regions different from your own, including where Alibaba Cloud, Google/Firebase, and Volcengine operate. Privacy and data-protection laws may differ. We limit transfers to those needed to provide the selected service and apply the safeguards described in this policy.
10. Changes and contact
We may update this policy when SmartPenny's features, providers, or legal obligations change. The effective date above will be updated, and material changes will be communicated through an appropriate in-app or service notice.
Privacy questions and requests: privacy@apx.gy
Developer and data controller: Bai Yuan
一、适用范围与运营者
本隐私政策适用于 SmartPenny Android 应用（包名 com.comics.smartpeny）及本网站和 API 提供的 SmartPenny 服务。SmartPenny 由 Bai Yuan 运营并负责本政策所述的数据处理。
二、我们处理的数据
- 账号和认证数据：通过 Google/Firebase 登录时获得的 Firebase 用户标识、邮箱、显示名称、头像地址和完成登录所需的认证凭据，以及 SmartPenny 会话令牌。已有邮箱密码账号也可通过 Firebase Authentication 登录；邮箱和密码通过 HTTPS 直接交由 Firebase 验证，SmartPenny API 接收 Firebase 身份令牌，不接收你的密码。
- 财务与账本内容：你提供的日期、分类、金额、收支类型、预算、统计、周期规则、家庭账本名称、成员关系和邀请码。这些信息可能反映个人财务活动。
- 文件、图片和相机：文本、CSV 和支持的表格文件在设备本地解析；仅当你主动使用 AI 账单图片识别时，所选图片会通过 HTTPS 发送给火山引擎方舟/豆包提取流水文字。普通二维码画面在设备本地处理，SmartPenny 不会保存。
- 反馈和技术信息：反馈文字、类型、可选联系方式和附件、应用版本、设备品牌/型号、Android 版本、处理状态和客服回复；托管设施还可能生成 IP、请求时间、错误和安全事件等有限日志。
- 设备本地数据：登录会话、显示偏好、预算设置、周期规则缓存等。Android 可能根据你的 Google 账号和系统设置执行应用数据备份或设备迁移。
三、使用目的
我们使用数据完成账号认证，提供记账、预算、周期记账、家庭共享、导入导出和跨设备同步，在你选择时识别账单图片，处理反馈和故障，防止滥用、维护安全与稳定，以及履行适用法律和隐私请求。
SmartPenny 不出售个人数据、不展示广告，也未集成广告或行为分析 SDK。
四、数据共享
数据仅在提供服务所需范围内共享给：用于登录认证和 Android 备份的 Google/Firebase；用于服务器、数据库和安全基础设施的阿里云；仅在你主动使用图片识别时处理账单图片的火山引擎方舟/豆包；你主动加入或分享的家庭账本成员；以及法律要求或保护用户与服务安全时的主管机关和专业顾问。
五、安全措施
我们使用 HTTPS 加密传输、受控服务器访问、私有数据库网络、认证 API、受限生产凭据和运行监控。任何系统都无法保证绝对安全，请妥善保护 Google 账号和设备，不要向他人提供验证码或令牌。
六、保存与删除
账号和同步数据在账号有效期间或提供功能所需期间保存；反馈和运行日志仅在处理支持、安全和故障所需的有限期间保存。你可以随时申请删除。完成合理的身份核验后，我们会在 30 天内从活动系统删除或不可逆匿名化账号及关联数据。
如法律义务、反欺诈、安全、争议解决或权利保护确有要求，我们可能仅保留必要的最少信息，并在保留目的结束后删除。删除说明见 账号删除页面。
七、你的选择和权利
你可以选择不创建或不使用 SmartPenny 账号，但依赖身份认证的应用功能将无法使用。你也可以拒绝相机权限、不使用 AI 图片识别、编辑或删除流水、退出或删除符合条件的家庭账本、通过 Android 设置清除本地数据、导出支持的数据，或向我们申请访问、更正、删除以及了解数据处理情况。你所在地法律还可能赋予反对、限制、可携带和投诉等权利。
八、未成年人
SmartPenny 不面向 13 岁以下儿童或当地法律规定的更高最低年龄人群。我们不会故意收集无法合法同意的儿童个人数据。监护人如发现儿童提供了数据，可以联系我们删除。
九、跨境处理
SmartPenny 及服务提供商可能在你所在国家或地区之外处理信息，包括阿里云、Google/Firebase 和火山引擎运营所在地。不同地区的隐私法律可能不同，我们仅在提供所选服务所需范围内传输，并采取本政策所述保护措施。
十、更新与联系
当功能、服务商或法律要求变化时，我们可能更新本政策，并更新页面顶部的生效日期；重大变化会通过适当的应用内或服务通知说明。
隐私咨询及请求：privacy@apx.gy
开发者及数据处理责任人：Bai Yuan